Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8afc3930-5bc7-3cc4-926e-eacd5d1c308c.roa
File:                     8afc3930-5bc7-3cc4-926e-eacd5d1c308c.roa (raw, json)
Hash identifier:          y7jFTwu2iFGLsTqqVZQqKoWVlzcxb2mslJkwhraR0JU=
Subject key identifier:   21:FB:BF:60:09:48:71:E1:D8:85:0F:D4:27:B9:33:A8:FB:D1:81:24
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E54D76B6CB0EA9E018780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8afc3930-5bc7-3cc4-926e-eacd5d1c308c.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.21.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:54:d7:6b:6c:b0:ea:9e:01:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=3466df80-dc94-4ee2-acf3-af8c44cfd2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:24:33:36:91:ad:3f:dd:a3:48:21:e3:25:e1:
                    14:0b:04:00:03:0c:3b:55:dc:5b:7f:52:24:a7:94:
                    a3:e7:b7:81:21:28:b3:66:01:c3:4b:a0:20:c8:d5:
                    91:6e:03:5f:d4:85:bb:ec:8d:99:cc:2f:15:4b:cd:
                    ba:c7:5d:70:aa:16:c0:0a:7a:75:5c:63:6e:ab:ef:
                    4e:a7:e0:e6:a1:e0:75:20:12:f0:cc:6c:1f:71:99:
                    17:a3:8f:18:09:d5:df:46:64:92:5e:6c:25:a8:d1:
                    bd:ca:cc:74:91:ee:80:e9:6a:fd:03:42:25:28:76:
                    d5:ca:ce:dd:80:71:9c:62:7b:03:1c:6d:51:c8:e8:
                    01:98:38:ae:a5:e8:f8:ec:77:3a:3f:cc:55:bf:4c:
                    0a:cd:fb:c3:8f:61:16:0e:fb:cc:da:c8:51:68:e5:
                    4e:fe:2b:10:b8:b8:ce:96:f9:87:3b:1c:26:e3:0c:
                    82:61:13:45:ed:1a:75:ae:a2:88:6f:ac:d4:f4:d4:
                    3a:d8:d5:e8:f0:2d:08:5f:72:1b:93:c8:65:35:75:
                    3d:33:d6:f3:ed:88:a9:72:bf:f9:36:38:a6:5c:cf:
                    17:3d:44:70:ea:98:09:30:63:e5:f5:9b:6b:0e:33:
                    41:f6:c1:fb:dc:8c:4e:97:c9:6f:55:0e:a8:2e:ec:
                    e1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FB:BF:60:09:48:71:E1:D8:85:0F:D4:27:B9:33:A8:FB:D1:81:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8afc3930-5bc7-3cc4-926e-eacd5d1c308c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:76:7e:a3:4a:74:32:dc:9f:a7:b1:e4:1a:20:58:67:ac:15:
         40:84:8a:08:7d:69:88:a4:6e:9f:fe:46:73:4d:19:67:20:1b:
         5c:82:62:63:25:16:07:60:76:a9:63:c8:4a:c5:e1:0d:2e:e7:
         9d:2b:35:e4:ad:34:bc:eb:02:3e:74:9f:c2:31:a6:fe:d7:e0:
         1a:ca:50:14:6d:5a:42:a5:fd:17:5b:c9:9b:11:55:ed:20:51:
         6c:3c:e4:6f:1d:d7:9e:13:8a:aa:e7:e8:20:45:3e:2d:e0:0e:
         85:94:42:d2:c3:7b:ad:6b:60:03:83:2e:fb:2b:8e:47:55:05:
         28:29:40:f9:1f:46:fe:df:68:f8:89:b3:00:e7:2f:dd:bc:93:
         7a:f9:33:ac:ad:ff:ad:f4:be:02:c6:96:d2:dc:22:ba:1a:20:
         20:f0:68:83:c2:81:d2:83:bf:90:f1:f1:86:1e:c4:87:6c:e0:
         f0:de:c0:a3:c3:76:19:f6:17:98:d4:91:02:1d:4a:68:e5:7e:
         33:2f:0d:06:56:3c:2b:20:49:9a:3b:fb:53:b1:3d:41:76:8c:
         1b:51:9f:1e:fb:8c:0d:ca:ab:db:8b:0e:e0:fc:2e:a2:10:7a:
         73:48:7c:6d:59:be:6e:b7:87:e5:68:b9:09:b6:1f:a3:2e:22:
         01:81:d9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:36 2024 by rpki-client on console-ams.rpki-client.org